Red Hat Security AdvisoryRHSA-2012:1057
resteasy security update
Released 2012-07-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat JBoss Web Platform 5.1
Fixes 2 records
Priority LOW 29
RESTEasy before 2.3.1 allows remote attackers to read arbitrary files via an external entity reference in a DOM document, aka an XML external entity (XXE) injection attack.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.1 CWE-200
Priority LOW 29
The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Binding (JAXB) input, a…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03213 · Published 2012-11-23 · Partial fix · 2.3.2 CWE-200
